« Volver al listado

CVE-2004-0605

Estado: ModificadaMedia (5)—

Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0605",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-06T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=108766803817406&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/10572",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16457",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=108766803817406&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/10572",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16457",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-16"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued."
    },
    {
      "lang": "es",
      "value": "Usuarios de IRC no registrados usando (1) ircd-hybrid 7.0.1 y anteriores (2) ircd-ratbox 1.5.1 y anteriores, o (3) ircd-ratbox 2.0rc6 o anteriores no tienen un límite de transferencia impuesto, lo que podría permitir a atacantes remotos causar una denegación de servicio haciendo peticiones repetidamente, que son desencoladas lentamente."
    }
  ],
  "lastModified": "2026-06-16T22:05:58.647",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ircd-hybrid:ircd-hybrid:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "788A7062-A8F3-44C0-AC08-EA6AF173D18C",
              "versionEndIncluding": "7.0.1"
            },
            {
              "criteria": "cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15B792C8-7B97-463F-89FB-E9507B108910",
              "versionEndIncluding": "1.5.1"
            },
            {
              "criteria": "cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0DB6A94-31D2-472B-A895-6B5A7D1D9EED",
              "versionEndIncluding": "2.0_rc6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}